DETECTION OF MALWARE
Number of patents in Portfolio can not be more than 2000
United States of America Patent
Stats
-
N/A
Issued Date -
Dec 29, 2016
app pub date -
Jun 27, 2015
filing date -
Jun 27, 2015
priority date (Note) -
Published
status (Latency Note)
Importance
Abstract
Particular embodiments described herein provide for an electronic device that can be configured to monitor a process, determine if the process is parsing to look for one or more system functions, and flag the process if the process is parsing to look for one or more system system functions. In an example, the process can be determined to be parsing to look for one or more system functions if the process parses portable executable headers to find and interpret dynamic link library tables. In another example, the process can be determined to be parsing to look for one or more system functions if the process calls GetProcAddress.
First Claim
Other Claims data not available